WO1990016126A1 - Controller prohibiting data communication until user is verified - Google Patents

Controller prohibiting data communication until user is verified Download PDF

Info

Publication number
WO1990016126A1
WO1990016126A1 PCT/US1990/003302 US9003302W WO9016126A1 WO 1990016126 A1 WO1990016126 A1 WO 1990016126A1 US 9003302 W US9003302 W US 9003302W WO 9016126 A1 WO9016126 A1 WO 9016126A1
Authority
WO
WIPO (PCT)
Prior art keywords
host computer
control unit
user
remote device
data communication
Prior art date
Application number
PCT/US1990/003302
Other languages
French (fr)
Inventor
Ian Ruddle
Original Assignee
Ian Ruddle
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ian Ruddle filed Critical Ian Ruddle
Priority to DK90910026T priority Critical patent/DK0477281T3/en
Priority to AU58438/90A priority patent/AU647740B2/en
Priority to BR909007441A priority patent/BR9007441A/en
Priority to DE69032938T priority patent/DE69032938T2/en
Priority to EP90910026A priority patent/EP0477281B1/en
Publication of WO1990016126A1 publication Critical patent/WO1990016126A1/en

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/42—User authentication using separate channels for security data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
    • G06F3/16—Sound input; Sound output
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M11/00—Telephonic communication systems specially adapted for combination with other electrical systems
    • H04M11/06—Simultaneous speech and data transmission, e.g. telegraphic transmission over the same conductors
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2113—Multi-level security, e.g. mandatory access control

Definitions

  • This invention relates to a switching system and process for controlling data communication between a host computer and a remote device.
  • the apparatus may be used to suspend data communication, pending verification of a user by matching the user's voice characteristics with a pre-registered file,- passed over a standard telephone line.
  • the communication controller of the present invention suspends data communication between a host computer and a remote device, such as a terminal, while additional identifying information is obtained from a user. Addressing and switching techniques preclude data communication with the host computer over a particular line at prescribed points in the
  • SUBSTITUTESHEET access sequence such as when a user is attempting initial entry into the system or accessing a "higher" or more sensitive level of recorded information. While data communication is suspended the telecommunications control unit associated with the particular incoming line remains in or returns to "voice" mode and allows voice transmissions to be made to a conventional voice processing unit. If the voice information falls within acceptable limits a signal is returned to the telecommunications control unit, causing it to switch to data mode and allow continued data communication between the host computer and the terminal. If the voice information lies outside acceptable parameters, a "clear and reset" signal is sent to the telecommunications control unit and communication with the terminal discontinued.
  • FIG. 1 is a block diagram of the control system of the present invention showing the interaction between the controller, host computer, and alternate terminals.
  • FIG. 2 is a flow chart of the method of suspending and reestablishing data communication between the terminal and host computer for purposes of user identification performed by the controllers in FIG. 1 for the basic requirement of a remote terminal user.
  • FIG. 3 is a flow chart detailing the commands issued by the controller of FIG. 1 while performing the method of FIG. 2.
  • FIG. 4 is a flow chart of the method of suspending and reestablishing data communication between the terminal and host computer for purposes of user identification performed by the controllers in FIG. 1 when a permanently connected terminal is used.
  • FIG. 5 is a flow chart detailing the commands issued by the controller of FIG. 1 while performing the method of FIG. 4.
  • FIG. 6 is a block diagram of the two versions of the telecommunications control unit shown in FIG. 1 needed to perform the methods of FIGS. 2 and 4.
  • FIG. 1 details the major components of the control system 10 of the present invention and their interaction with a telephone 12, remote terminal 14 (or permanently connected terminal 16) and host computer 18.
  • Control system 10 includes telecommunications control -unit 24, matrix switch controller 28 (including process control software) , and external control device 32.
  • Control unit 24 which may be a standard V22 modem modified to pass voice information and generate and respond to additional non-standard commands, serves to transmit and receive data to terminal 14 via standard telephone line 36.
  • Matrix switch controller 28 connects control unit 24 to the external control device 32 via lines 40 and 42 and routes verification information between the
  • SHEET two devices External controller 32 interrogates the user of terminal 14 in voice mode and compares the audible response received over telephone line 36 to a preselected file containing voice information for a particular user identification symbol.
  • Line 44 typically an RS 232 connector cord, links control unit 24 to host computer 18 to allow data communications between the two apparatuses.
  • Standard telephone-type connectors 48 such as RJ11 connectors
  • adaptors may be used to permit passage of both voice information and data to and from the ports of control unit 24.
  • each control unit 24, matrix switch controller 28, and external controller 32 are specifically shown in FIG. l, those skilled in the art will readily recognize that any number of such devices may be used in the controller system of the present invention, depending upon the size of the computer network and the number of verification requests anticipated. In most cases more than one of these devices will be present in the system, and intercommunication is conducted using a standard common UNIX bus with each matrix switch controller 28, which as contemplated will manage as many as sixteen control units 24 and four paths 40 and 42 to external controllers 32, merely scanning or polling the devices sequentially to determine when action is needed.
  • the matrix switch controller 28 also may be connected in a controlled link path 46 to the associated host computer 18 when the configuration is used to verify a user on a permanently connected terminal 16, such as an SNA network, or a multiplexed communications link 48.
  • telecommunications control unit 24 may be modified to detect at the appropriate time DTMF keyed information from the keypad of telephone 12 representing the user identifier for "voice" file selection and to ensure the correct data session on the permanent network is verified.
  • FIGS. 2 and 3 present flow charts of the process performed and commands issued by the controllers of the present invention to serve the remote or dial-up users from the terminal 14.
  • control unit 24 labeled “Version 1" in FIGS. 2-3 and 6
  • ring detect mode and generates a carrier signal (block 54) similar to that initiated by any standard V22 modem.
  • Appropriate equipment attached to terminal 14 detects the carrier (block 58) and immediately is placed in "data" mode ready to transmit data to the host computer 18.
  • Control unit 24 also sends a "suspend" signal to matrix switch controller 28, which logs the port number of the unit 24 and the "call suspended” condition and responds by prompting the user of terminal 14 to enter identifying information (such as a password or user identification number or name) into the data stream between the terminal and control unit 24 (block 62) .
  • matrix switch controller 28 passes such information to external controller 32.
  • Matrix switch controller 28 also notes the identity of the control unit 24 and external controller 32, switches the two-wire voice path 40 and 42 between the appropriate units (block 66a) , commands control unit 24 to enter "voice" mode (block 66b) , and through a "verification request" signal provides to external controller 32 the identification information obtained from both the remote user and the control unit 24 (block 66c) .
  • data communications may be suspended at any desired time, including when particular triggering data is transmitted to or received from terminal 14.
  • UBSTITUTESHEET Once the verification request signal is received by the external controller 32, that device selects the pre-registered user "voice" file corresponding to the identification number provided (block 68 of FIG. 3) and the user is prompted (block 66d) to recite appropriate words or phrases into the telephone equipment using line 36 (block 70) . External controller 32 subsequently compares the information obtained through the voice link to the voice characteristics prerecorded in the user "voice” file and either renders a verification decision (positive or negative) or continues the recitation prompts (block 74) . When a decision is made external controller 32 sends an appropriate signal to matrix switch controller 28.
  • control unit 24 If voice verification is achieved (or a pre-set time has elapsed) control unit 24 in turn is instructed to return to "data" mode (block 78) and allow data communication between terminal 14 and host computer 18 (block 82) and lines 40 and 42 are cleared. Conversely, if a voice match is not made, control unit 24 is instructed to enter a "clear and reset" mode (block 84 of FIG. 3) whereby the unverified call is cleared from the system and the control unit reset to an "on-hook" condition for receiving other incoming calls.
  • FIGS. 4 and 5 detail the process performed and commands issued by the controller of the present invention serving a permanently connected terminal 16.
  • control unit 24 (labeled “Version 2" in FIGS. 4-6) is modified to handle DTMF tones instead of using an analog-to-digital (A/D) converter and is bypassed by the data path, which is routed directly from terminal 16 to host computer 18.
  • A/D analog-to-digital
  • control unit 24 will signal the matrix switch controller 20 over the host control path 46 that a specific session with a particular user requires attention.
  • control unit 24 When the ring current generated by the incoming call is detected, control unit 24 is placed in "ring detect mode" and generates a short prompt tone (block 86) heard by the user. At this time the user enters the identifying information using the keypad of telephone 12 (block 87) .
  • Control unit 24 also sends a "suspend" signal to matrix switch controller 28, which logs the port number of the unit 24 (block 88) .
  • the matrix switch controller matches the incoming host session information and the decoded DTMF identifier (blocks 89 and 90) and advises the external control device 32 to proceed with interrogation of the user.
  • Matrix switch controller 28 also notes the identity of the control unit 24 and external controller 32, switches the two-wire voice path 40 and 42 between the appropriate units (block 91a) , commands control unit 24 to enter "voice" mode (block 91b) , and through a "verification request" signal provides to external controller 32 the identification information obtained from both the remote user and the control unit 24 (block 91c) .
  • data communications may be suspended at any desired time, including when particular triggering data is transmitted to or received from terminal 16.
  • T TESHEET file either renders a verification decision (positive or negative) or continues the recitation prompts (block 94) .
  • a decision is made external controller 32 sends an appropriate signal to matrix switch controller 28.
  • voice verification is achieved (or a pre-set time has elapsed)
  • control unit 24 in turn is instructed to clear down the call on line 36 and the temporary paths 40 and 42 (block 95) .
  • a controlled response is sent by the matrix switch controller 28 over the host control path 46 to the host/network computer 18 advising it of the approval to continue the specific session (block 96) . Should verification not be granted the host computer 18 will be instructed to cancel the specific session and all paths in the matrix switch controller 28 and telecommunications control unit 24 will be reset.
  • FIG. 6 details the two versions of telecommunications control unit 24 necessary to accomplish the methods described above.
  • Version 1 of control unit 24, used to serve remote terminals may be a modified V22 modem capable of detecting incoming ring current (block 100) , handling tones (block 104) , converting the analog tones to digital information (block 108) , and communicating with the host computer 18 and via bus 112 (block 116) .
  • Version 2 of control unit 24, used in conjunction with a permanently connected terminal or network may be an intelligent DTMF decoder capable of detecting incoming ring current (block 120) , handling tones (block 124) , decoding DTMF information (block 128) , and communicating via the bus 112 (block 132) .
  • commands generated by the devices comprising the multi-port control system of FIG. 1 appears below.
  • Such commands may easily be coded in UNIX or other appropriate operating systems, as is well known to those of ordinary skill in this art, and include: "Call suspended" command—generated after detection of incoming ring current information and includes the default target address of the matrix switch controller 28, the port number of the initiating control unit 24, and the appropriate interrupt address for this command;
  • Go voice command generated after the process control software has detected receipt of user idenfication information and includes the port number of the initiating control unit 24 and the appropriate interrupt address for this command;
  • Go session command generated after detection of positive verification signal from external controller 32 and includes all port numbers of initiating control unit 24, host session reference number, terminal identification, user DTMF identification, and the appropriate interrupt address for the command.
  • a "busy out” command could be used to disable a specifically addressed telecommunications control unit 24 for maintenance or repair, while a "status check” command could be used to determine the resident state of a particular control unit at a given time.
  • telecommunications control unit 24 (Version 2 of FIG. 6) could be used in a similar system to verify a voice user for accessing a voice host, i.e., a host which prompts the user verbally and reacts to either voice or DTMF tone information.

Abstract

A system and method are disclosed for controlling data communication between a host computer (18) and a remote device (14) such as a terminal. The controller (28) prohibits data communication between the two devices when desirable to effect verification of information such as a user's voice characteristics obtained over the same (or a different) communication channel.

Description

CONTROLLER PROHIBITING DATA COMMUNICATION UNTIL USER IS VERIFIED
This invention relates to a switching system and process for controlling data communication between a host computer and a remote device. The apparatus may be used to suspend data communication, pending verification of a user by matching the user's voice characteristics with a pre-registered file,- passed over a standard telephone line.
Background of the Invention Maintaining the integrity of the information contained in a computer system is of great importance to computer operators. Traditional means of limiting system access to authorized users include requiring those desiring admittance to provide identifying information including a password. This information typically is entered into the data stream between the terminal in use and the host computer and has proven to be extremely useful in distinguishing authorized from unauthorized users. In some cases, additional layers of passwords or challenges have been added. Many systems, however, require even greater security than the conventional methods provide. For these systems information obtained from sources other than the data stream, such as voice intelligence, furnishes an additional measure of protection not present in the traditional approach to computer security.
Summary of the Invention The communication controller of the present invention suspends data communication between a host computer and a remote device, such as a terminal, while additional identifying information is obtained from a user. Addressing and switching techniques preclude data communication with the host computer over a particular line at prescribed points in the
SUBSTITUTESHEET access sequence, such as when a user is attempting initial entry into the system or accessing a "higher" or more sensitive level of recorded information. While data communication is suspended the telecommunications control unit associated with the particular incoming line remains in or returns to "voice" mode and allows voice transmissions to be made to a conventional voice processing unit. If the voice information falls within acceptable limits a signal is returned to the telecommunications control unit, causing it to switch to data mode and allow continued data communication between the host computer and the terminal. If the voice information lies outside acceptable parameters, a "clear and reset" signal is sent to the telecommunications control unit and communication with the terminal discontinued.
It is therefore an object of the present invention to provide an apparatus for temporarily suspending data communication between a host computer and a terminal.
It is an additional object of the present invention to provide an apparatus for providing an increased measure of integrity for a multi-user computer system by suspending data communication while verification based on information obtained from a different source, such as a user's voice, is performed.
Other objects, features, and advantages of the present invention will become apparent with reference to the remainder of the written portion and the drawings of this invention.
Brief Description of the Drawings FIG. 1 is a block diagram of the control system of the present invention showing the interaction between the controller, host computer, and alternate terminals.
EET FIG. 2 is a flow chart of the method of suspending and reestablishing data communication between the terminal and host computer for purposes of user identification performed by the controllers in FIG. 1 for the basic requirement of a remote terminal user.
FIG. 3 is a flow chart detailing the commands issued by the controller of FIG. 1 while performing the method of FIG. 2.
FIG. 4 is a flow chart of the method of suspending and reestablishing data communication between the terminal and host computer for purposes of user identification performed by the controllers in FIG. 1 when a permanently connected terminal is used.
FIG. 5 is a flow chart detailing the commands issued by the controller of FIG. 1 while performing the method of FIG. 4.
FIG. 6 is a block diagram of the two versions of the telecommunications control unit shown in FIG. 1 needed to perform the methods of FIGS. 2 and 4.
Detailed Description of the Drawings FIG. 1 details the major components of the control system 10 of the present invention and their interaction with a telephone 12, remote terminal 14 (or permanently connected terminal 16) and host computer 18. Control system 10 includes telecommunications control -unit 24, matrix switch controller 28 (including process control software) , and external control device 32. Control unit 24, which may be a standard V22 modem modified to pass voice information and generate and respond to additional non-standard commands, serves to transmit and receive data to terminal 14 via standard telephone line 36. Matrix switch controller 28 connects control unit 24 to the external control device 32 via lines 40 and 42 and routes verification information between the
SHEET two devices. External controller 32 interrogates the user of terminal 14 in voice mode and compares the audible response received over telephone line 36 to a preselected file containing voice information for a particular user identification symbol. Line 44, typically an RS 232 connector cord, links control unit 24 to host computer 18 to allow data communications between the two apparatuses. Standard telephone-type connectors 48 (such as RJ11 connectors) and adaptors may be used to permit passage of both voice information and data to and from the ports of control unit 24.
Although only one each control unit 24, matrix switch controller 28, and external controller 32 are specifically shown in FIG. l, those skilled in the art will readily recognize that any number of such devices may be used in the controller system of the present invention, depending upon the size of the computer network and the number of verification requests anticipated. In most cases more than one of these devices will be present in the system, and intercommunication is conducted using a standard common UNIX bus with each matrix switch controller 28, which as contemplated will manage as many as sixteen control units 24 and four paths 40 and 42 to external controllers 32, merely scanning or polling the devices sequentially to determine when action is needed.
The matrix switch controller 28 also may be connected in a controlled link path 46 to the associated host computer 18 when the configuration is used to verify a user on a permanently connected terminal 16, such as an SNA network, or a multiplexed communications link 48. In accordance with this configuration, telecommunications control unit 24 may be modified to detect at the appropriate time DTMF keyed information from the keypad of telephone 12 representing the user identifier for "voice" file selection and to ensure the correct data session on the permanent network is verified.
FIGS. 2 and 3 present flow charts of the process performed and commands issued by the controllers of the present invention to serve the remote or dial-up users from the terminal 14. When the ring current generated by an incoming call is detected via telephone line 36 (block 50) , control unit 24 (labeled "Version 1" in FIGS. 2-3 and 6) is placed In "ring detect" mode and generates a carrier signal (block 54) similar to that initiated by any standard V22 modem. Appropriate equipment attached to terminal 14 detects the carrier (block 58) and immediately is placed in "data" mode ready to transmit data to the host computer 18.
Control unit 24 also sends a "suspend" signal to matrix switch controller 28, which logs the port number of the unit 24 and the "call suspended" condition and responds by prompting the user of terminal 14 to enter identifying information (such as a password or user identification number or name) into the data stream between the terminal and control unit 24 (block 62) . In conjunction with the process control software, matrix switch controller 28 passes such information to external controller 32. Matrix switch controller 28 also notes the identity of the control unit 24 and external controller 32, switches the two-wire voice path 40 and 42 between the appropriate units (block 66a) , commands control unit 24 to enter "voice" mode (block 66b) , and through a "verification request" signal provides to external controller 32 the identification information obtained from both the remote user and the control unit 24 (block 66c) . Of course, data communications may be suspended at any desired time, including when particular triggering data is transmitted to or received from terminal 14.
UBSTITUTESHEET Once the verification request signal is received by the external controller 32, that device selects the pre-registered user "voice" file corresponding to the identification number provided (block 68 of FIG. 3) and the user is prompted (block 66d) to recite appropriate words or phrases into the telephone equipment using line 36 (block 70) . External controller 32 subsequently compares the information obtained through the voice link to the voice characteristics prerecorded in the user "voice" file and either renders a verification decision (positive or negative) or continues the recitation prompts (block 74) . When a decision is made external controller 32 sends an appropriate signal to matrix switch controller 28. If voice verification is achieved (or a pre-set time has elapsed) control unit 24 in turn is instructed to return to "data" mode (block 78) and allow data communication between terminal 14 and host computer 18 (block 82) and lines 40 and 42 are cleared. Conversely, if a voice match is not made, control unit 24 is instructed to enter a "clear and reset" mode (block 84 of FIG. 3) whereby the unverified call is cleared from the system and the control unit reset to an "on-hook" condition for receiving other incoming calls.
FIGS. 4 and 5 detail the process performed and commands issued by the controller of the present invention serving a permanently connected terminal 16. In this embodiment control unit 24 (labeled "Version 2" in FIGS. 4-6) is modified to handle DTMF tones instead of using an analog-to-digital (A/D) converter and is bypassed by the data path, which is routed directly from terminal 16 to host computer 18. When the host 18 determines during the session log-on that user verification is required it will suspend the session and prompt the user to contact the control unit 24 through telephone 12 (block 85) .
ET Additionally, the host computer 18 will signal the matrix switch controller 20 over the host control path 46 that a specific session with a particular user requires attention. When the ring current generated by the incoming call is detected, control unit 24 is placed in "ring detect mode" and generates a short prompt tone (block 86) heard by the user. At this time the user enters the identifying information using the keypad of telephone 12 (block 87) . Control unit 24 also sends a "suspend" signal to matrix switch controller 28, which logs the port number of the unit 24 (block 88) . The matrix switch controller matches the incoming host session information and the decoded DTMF identifier (blocks 89 and 90) and advises the external control device 32 to proceed with interrogation of the user. Matrix switch controller 28 also notes the identity of the control unit 24 and external controller 32, switches the two-wire voice path 40 and 42 between the appropriate units (block 91a) , commands control unit 24 to enter "voice" mode (block 91b) , and through a "verification request" signal provides to external controller 32 the identification information obtained from both the remote user and the control unit 24 (block 91c) . As noted above, data communications may be suspended at any desired time, including when particular triggering data is transmitted to or received from terminal 16.
As in FIG. 2, once the verification request signal is received by the external controller 32, that device selects the pre-registered user "voice" file corresponding to the identification number provided (block 92 of FIG. 5) and the user is prompted (block 9Id) to recite appropriate words or phrases into the telephone equipment using line 36 (block 93) . External controller 32 subsequently compares the information obtained through the voice link to the voice characteristics prerecorded in the user "voice"
T TESHEET file and either renders a verification decision (positive or negative) or continues the recitation prompts (block 94) . When a decision is made external controller 32 sends an appropriate signal to matrix switch controller 28. If voice verification is achieved (or a pre-set time has elapsed) control unit 24 in turn is instructed to clear down the call on line 36 and the temporary paths 40 and 42 (block 95) . Similarly, a controlled response is sent by the matrix switch controller 28 over the host control path 46 to the host/network computer 18 advising it of the approval to continue the specific session (block 96) . Should verification not be granted the host computer 18 will be instructed to cancel the specific session and all paths in the matrix switch controller 28 and telecommunications control unit 24 will be reset.
FIG. 6 details the two versions of telecommunications control unit 24 necessary to accomplish the methods described above. Version 1 of control unit 24, used to serve remote terminals, may be a modified V22 modem capable of detecting incoming ring current (block 100) , handling tones (block 104) , converting the analog tones to digital information (block 108) , and communicating with the host computer 18 and via bus 112 (block 116) . Version 2 of control unit 24, used in conjunction with a permanently connected terminal or network, may be an intelligent DTMF decoder capable of detecting incoming ring current (block 120) , handling tones (block 124) , decoding DTMF information (block 128) , and communicating via the bus 112 (block 132) .
A summary of commands generated by the devices comprising the multi-port control system of FIG. 1 appears below. Such commands may easily be coded in UNIX or other appropriate operating systems, as is well known to those of ordinary skill in this art, and include: "Call suspended" command—generated after detection of incoming ring current information and includes the default target address of the matrix switch controller 28, the port number of the initiating control unit 24, and the appropriate interrupt address for this command;
"Go voice" command—generated after the process control software has detected receipt of user idenfication information and includes the port number of the initiating control unit 24 and the appropriate interrupt address for this command;
"Verification request'r command—generated after the two-wire voice path 40 and 42 is switched between the initiating control unit 24 and external controller 32 and includes the target address of the external controller chosen, the port number of the initiating control unit, the appropriate interrupt address for this command, and the user's identification information;
"Go data" command—generated after detection of positive verification signal from external controller 32 and includes the port numbers of the initiating control unit 24 and appropriate external controller and the appropriate interrupt address for this command;
"Call verified" and "call denied" commands-?- generated to the bus after analysis of the identification information and include the port numbers of the external controller 32 and initiating control unit 24 and the appropriate interrupt address for the commands; and
"Go session" command—generated after detection of positive verification signal from external controller 32 and includes all port numbers of initiating control unit 24, host session reference number, terminal identification, user DTMF identification, and the appropriate interrupt address for the command.
The invention specifically contemplates that additional commands may be utilized in conjunction with the multi-port system described above. For example, a "busy out" command could be used to disable a specifically addressed telecommunications control unit 24 for maintenance or repair, while a "status check" command could be used to determine the resident state of a particular control unit at a given time.
ITUTESHEET The "call verified" and "call denied" signals issued by external controller 32 likewise could be used for troubleshooting purposes, to cause a specific control unit 24 to be placed in "data" or "clear and reset" modes, respectively. Utilization of the UNIX bus architecture addressing mentioned above also would allow forcible termination of an incoming call at any time and collection of data regarding date, time, control unit address, verification status, etc., if such is desired. Host control path 46 would serve as the preferred conduit for transmitting such management information to the host computer 18.
Additionally, telecommunications control unit 24 (Version 2 of FIG. 6) could be used in a similar system to verify a voice user for accessing a voice host, i.e., a host which prompts the user verbally and reacts to either voice or DTMF tone information.
The foregoing is provided for purposes of illustration, explanation, and description of preferred embodiments of the invention. Modifications and adaptations to these embodiments will be apparent to those of ordinary skill in the art and they may be made without departing from the scope or spirit of the invention.
SUBSTITUTESHEET

Claims

What is claimed is:
1. An apparatus for controlling data communication between a host computer and a remote device comprising: a. means for receiving data from the remote device and passing the data to the host computer; and b. means, electrically connected to the data receiving and passing means, for temporarily preventing the data from being passed to the host computer.
2. A method for verifying the identity of a user accessing a host computer from a remote device comprising the steps of: a. suspending data communication between the host computer and the remote device; b. obtaining identification information from the user; and c. analyzing the information obtained using voice processing techniques.
3. A method according to claim 2 in which the step of obtaining identification information is performed over a telephone line.
4. A method according to claim 2 further comprising the step of reestablishing data communication between the host computer and the remote device if verification is achieved.
5. A method for verifying the identity of a user accessing a host computer from a remote device comprising the steps of: a. detecting in a selected telecommunications control unit a host computer access request
TE SHEET transmitted from the remote device through a telephone line; b. issuing a signal from the selected telecommunications control unit to a matrix switch controller suspending data communication between the host computer and the remote device and providing information unique to the selected telecommunications control unit; c. prompting the user to provide identification information; d. passing the identification information and information unique to the selected telecommunications control unit to a selected external control device; e. prompting the user to speak into the telephone line; f. comparing the user's speech to prerecorded material contained in a file corresponding to the identification information previously provided; and g. issuing a signal from the matrix switch controller to the selected telecommunications control unit reestablishing data communication between the host computer and the remote device.
PCT/US1990/003302 1989-06-14 1990-06-11 Controller prohibiting data communication until user is verified WO1990016126A1 (en)

Priority Applications (5)

Application Number Priority Date Filing Date Title
DK90910026T DK0477281T3 (en) 1989-06-14 1990-06-11 Control device that prevents data communication until the user is verified
AU58438/90A AU647740B2 (en) 1989-06-14 1990-06-11 pontroller prohibiting data communication until user is verified
BR909007441A BR9007441A (en) 1989-06-14 1990-06-11 APPARATUS TO CONTROL DATA COMMUNICATION BETWEEN HOST COMPUTER AND REMOTE DEVICE AND PROCESS TO VERIFY A USER'S IDENTITY
DE69032938T DE69032938T2 (en) 1989-06-14 1990-06-11 CONTROL TO PREVENT DATA COMMUNICATION UNTIL USER VERIFICATION
EP90910026A EP0477281B1 (en) 1989-06-14 1990-06-11 Controller prohibiting data communication until user is verified

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US36674389A 1989-06-14 1989-06-14
US366,743 1989-06-14

Publications (1)

Publication Number Publication Date
WO1990016126A1 true WO1990016126A1 (en) 1990-12-27

Family

ID=23444310

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US1990/003302 WO1990016126A1 (en) 1989-06-14 1990-06-11 Controller prohibiting data communication until user is verified

Country Status (9)

Country Link
EP (2) EP0477281B1 (en)
AT (1) ATE176565T1 (en)
AU (1) AU647740B2 (en)
BR (1) BR9007441A (en)
CA (1) CA2060885C (en)
DE (1) DE69032938T2 (en)
DK (1) DK0477281T3 (en)
ES (1) ES2129394T3 (en)
WO (1) WO1990016126A1 (en)

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
NL1012478C2 (en) * 1999-06-30 2001-01-03 Koninkl Kpn Nv System for requesting and transferring information.
GB2368701A (en) * 2000-06-16 2002-05-08 Fisher Rosemount Systems Inc Function-based process control verification and security
US7653602B2 (en) 2003-11-06 2010-01-26 Visa U.S.A. Inc. Centralized electronic commerce card transactions
US7725369B2 (en) 2003-05-02 2010-05-25 Visa U.S.A. Inc. Method and server for management of electronic receipts
US7857215B2 (en) 2003-09-12 2010-12-28 Visa U.S.A. Inc. Method and system including phone with rewards image
US8005763B2 (en) 2003-09-30 2011-08-23 Visa U.S.A. Inc. Method and system for providing a distributed adaptive rules based dynamic pricing system
US8010405B1 (en) 2002-07-26 2011-08-30 Visa Usa Inc. Multi-application smart card device software solution for smart cardholder reward selection and redemption
US8015060B2 (en) 2002-09-13 2011-09-06 Visa Usa, Inc. Method and system for managing limited use coupon and coupon prioritization
US8407083B2 (en) 2003-09-30 2013-03-26 Visa U.S.A., Inc. Method and system for managing reward reversal after posting
US8429048B2 (en) 2009-12-28 2013-04-23 Visa International Service Association System and method for processing payment transaction receipts
US8554610B1 (en) 2003-08-29 2013-10-08 Visa U.S.A. Inc. Method and system for providing reward status
US8626577B2 (en) 2002-09-13 2014-01-07 Visa U.S.A Network centric loyalty system
US9852437B2 (en) 2002-09-13 2017-12-26 Visa U.S.A. Inc. Opt-in/opt-out in loyalty system
US11132691B2 (en) 2009-12-16 2021-09-28 Visa International Service Association Merchant alerts incorporating receipt data

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1273992A1 (en) * 2001-07-06 2003-01-08 Embetrix ApS Method and system for authorising modem dialling

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4577067A (en) * 1983-10-05 1986-03-18 Alfred Levy Remotely controlled telephone hold program system
US4585904A (en) * 1982-02-05 1986-04-29 General Telephone Inc. Programmable computerized telephone call cost metering device
US4737976A (en) * 1985-09-03 1988-04-12 Motorola, Inc. Hands-free control system for a radiotelephone
US4785408A (en) * 1985-03-11 1988-11-15 AT&T Information Systems Inc. American Telephone and Telegraph Company Method and apparatus for generating computer-controlled interactive voice services
US4788715A (en) * 1986-10-16 1988-11-29 American Telephone And Telegraph Company At&T Bell Laboratories Announcing waiting times in queuing systems
US4850005A (en) * 1986-08-06 1989-07-18 Hashimoto Corporation Telephone answering device with artificial intelligence

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4484306A (en) * 1982-03-22 1984-11-20 Exide Electronics Corporation Method and apparatus for controlling access in a data transmission system
DE3328085C2 (en) * 1983-08-03 1986-07-10 Siemens AG, 1000 Berlin und 8000 München Method of transferring data
CA1287910C (en) * 1986-09-30 1991-08-20 Salvador Barron Adjunct processor for providing computer facility access protection via call transfer

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4585904A (en) * 1982-02-05 1986-04-29 General Telephone Inc. Programmable computerized telephone call cost metering device
US4577067A (en) * 1983-10-05 1986-03-18 Alfred Levy Remotely controlled telephone hold program system
US4785408A (en) * 1985-03-11 1988-11-15 AT&T Information Systems Inc. American Telephone and Telegraph Company Method and apparatus for generating computer-controlled interactive voice services
US4737976A (en) * 1985-09-03 1988-04-12 Motorola, Inc. Hands-free control system for a radiotelephone
US4850005A (en) * 1986-08-06 1989-07-18 Hashimoto Corporation Telephone answering device with artificial intelligence
US4788715A (en) * 1986-10-16 1988-11-29 American Telephone And Telegraph Company At&T Bell Laboratories Announcing waiting times in queuing systems

Cited By (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001002933A1 (en) * 1999-06-30 2001-01-11 Koninklijke Kpn N.V. System for retrieving and transmitting information
NL1012478C2 (en) * 1999-06-30 2001-01-03 Koninkl Kpn Nv System for requesting and transferring information.
GB2368701A (en) * 2000-06-16 2002-05-08 Fisher Rosemount Systems Inc Function-based process control verification and security
GB2368701B (en) * 2000-06-16 2004-08-25 Fisher Rosemount Systems Inc Function-based process control verification and security in a process control system
US7069580B1 (en) 2000-06-16 2006-06-27 Fisher-Rosemount Systems, Inc. Function-based process control verification and security in a process control system
US8010405B1 (en) 2002-07-26 2011-08-30 Visa Usa Inc. Multi-application smart card device software solution for smart cardholder reward selection and redemption
US10460338B2 (en) 2002-09-13 2019-10-29 Visa U.S.A. Inc. Network centric loyalty system
US9852437B2 (en) 2002-09-13 2017-12-26 Visa U.S.A. Inc. Opt-in/opt-out in loyalty system
US8626577B2 (en) 2002-09-13 2014-01-07 Visa U.S.A Network centric loyalty system
US8239261B2 (en) 2002-09-13 2012-08-07 Liane Redford Method and system for managing limited use coupon and coupon prioritization
US8015060B2 (en) 2002-09-13 2011-09-06 Visa Usa, Inc. Method and system for managing limited use coupon and coupon prioritization
US7827077B2 (en) 2003-05-02 2010-11-02 Visa U.S.A. Inc. Method and apparatus for management of electronic receipts on portable devices
US7987120B2 (en) 2003-05-02 2011-07-26 Visa U.S.A. Inc. Method and portable device for management of electronic receipts
US7725369B2 (en) 2003-05-02 2010-05-25 Visa U.S.A. Inc. Method and server for management of electronic receipts
US9087426B2 (en) 2003-05-02 2015-07-21 Visa U.S.A. Inc. Method and administration system for management of electronic receipts
US8386343B2 (en) 2003-05-02 2013-02-26 Visa U.S.A. Inc. Method and user device for management of electronic receipts
US8554610B1 (en) 2003-08-29 2013-10-08 Visa U.S.A. Inc. Method and system for providing reward status
US8793156B2 (en) 2003-08-29 2014-07-29 Visa U.S.A. Inc. Method and system for providing reward status
US7857215B2 (en) 2003-09-12 2010-12-28 Visa U.S.A. Inc. Method and system including phone with rewards image
US7857216B2 (en) 2003-09-12 2010-12-28 Visa U.S.A. Inc. Method and system for providing interactive cardholder rewards image replacement
US8005763B2 (en) 2003-09-30 2011-08-23 Visa U.S.A. Inc. Method and system for providing a distributed adaptive rules based dynamic pricing system
US8407083B2 (en) 2003-09-30 2013-03-26 Visa U.S.A., Inc. Method and system for managing reward reversal after posting
US8244648B2 (en) 2003-09-30 2012-08-14 Visa U.S.A. Inc. Method and system for providing a distributed adaptive rules based dynamic pricing system
US9710811B2 (en) 2003-11-06 2017-07-18 Visa U.S.A. Inc. Centralized electronic commerce card transactions
US7653602B2 (en) 2003-11-06 2010-01-26 Visa U.S.A. Inc. Centralized electronic commerce card transactions
US11132691B2 (en) 2009-12-16 2021-09-28 Visa International Service Association Merchant alerts incorporating receipt data
US8429048B2 (en) 2009-12-28 2013-04-23 Visa International Service Association System and method for processing payment transaction receipts
US8650124B2 (en) 2009-12-28 2014-02-11 Visa International Service Association System and method for processing payment transaction receipts

Also Published As

Publication number Publication date
DK0477281T3 (en) 1999-09-20
CA2060885C (en) 1999-03-30
AU647740B2 (en) 1994-03-31
BR9007441A (en) 1992-06-16
ES2129394T3 (en) 1999-06-16
DE69032938T2 (en) 1999-07-29
AU5843890A (en) 1991-01-08
EP0477281A4 (en) 1992-10-28
EP0896463A1 (en) 1999-02-10
CA2060885A1 (en) 1990-12-15
DE69032938D1 (en) 1999-03-18
EP0477281A1 (en) 1992-04-01
EP0477281B1 (en) 1999-02-03
ATE176565T1 (en) 1999-02-15

Similar Documents

Publication Publication Date Title
EP0477281B1 (en) Controller prohibiting data communication until user is verified
US5142565A (en) Controller for managing data communication with a host computer for the purpose of user verification by voice processing
US5333152A (en) Electronic mail remote data transfer system
US4891838A (en) Computer accessing system
US5809118A (en) System and method for triggering actions at a host computer by telephone
US5636282A (en) Method for dial-in access security using a multimedia modem
US7870599B2 (en) Multichannel device utilizing a centralized out-of-band authentication system (COBAS)
US7464035B2 (en) Voice control of home automation systems via telephone
US4937855A (en) Building security system
US5384822A (en) Computer controlled test facility for a telecommunication switch
US4905281A (en) Security apparatus and method for computers connected to telephone circuits
US6246988B1 (en) Method and apparatus for accessing a data base via speaker/voice verification
US4626623A (en) Method and apparatus for telephone access security
ATE397350T1 (en) METHOD AND DEVICE FOR REMOTELY CONTROLLING EQUIPMENT AND DEVICES VIA A TELEPHONE NETWORK
JPH04218860A (en) Apparatus and method for computer security system
US5852653A (en) Communications line security device
KR0183037B1 (en) Method of controlling access to restricted access data and communication system therefor
EP1119147A1 (en) Provision of secure access for telecommunications system
JP2000236396A (en) Remote controller and remote controlling method
GB2300785A (en) Identifying a used line with a CLI device
KR20040081692A (en) Power switching system for remote computer
JPH10190876A (en) Callback device with illegal access protection system
JPS6243628B2 (en)
JPH0730737A (en) Facsimile receiver
JPH09261701A (en) Telephone system

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AU BR CA JP KR SU

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH DE DK ES FR GB IT LU NL SE

WWE Wipo information: entry into national phase

Ref document number: 1990910026

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2060885

Country of ref document: CA

WWP Wipo information: published in national office

Ref document number: 1990910026

Country of ref document: EP

WWG Wipo information: grant in national office

Ref document number: 1990910026

Country of ref document: EP